$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft File: p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft (raw, json) Hash identifier: LFWDrh+WPWmh4Lmt1AQ9xPHbbwoTWRndk3qVwGRg9Nw= Subject key identifier: 34:56:C6:7D:36:33:D4:3A:07:F1:64:32:80:6E:EB:11:12:05:27:64 Authority key identifier: A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7 Certificate issuer: /CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7 Certificate serial: 019A0D8248292E2F2047B35B1EFF600009F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft Manifest number: 1702 Signing time: Wed 22 Oct 2025 20:00:33 +0000 Manifest this update: Wed 22 Oct 2025 20:00:33 +0000 Manifest next update: Thu 23 Oct 2025 20:00:33 +0000 Files and hashes: 1: QT7D6zXAVoUxNK5Dz_Sr3Ysp0jY.roa (hash: NxSCkfWg+RxkMBPwT+VShHgw3RROnFUgM7kWEk11WTI=) 2: XbTeM1PqMKcQqGHBF2Epuf32B9A.roa (hash: hOnMCvxmcOEtS0aimUSMyI+EYwi7WWRIO2fcpaLnTMo=) 3: hRG76VocwZXhxkxCAJrESxkkjbY.roa (hash: R6reBqJWi+zQpuGx/72cFGp8W0OEKy5DLaWeb2k91DA=) 4: iWHLz7pb0VOnknWH2cLTUErxOZo.roa (hash: jWeDGrOMaI4VEcetBFaHjDSN9dYVfQeBBIRCHkcbqGg=) 5: l-wNxi1bPZkNern9TbmWMfg4MJ4.roa (hash: WyFvbV1rJyTWSGqAchaQ6NeEA4bf29r+mAAX5z8uy7I=) 6: nKH_sxXM1uxYbMZBzn1lBWWh5Gk.roa (hash: g58milGmDWRWbcSoOduM9RCTlJ8I/zXGlZd0g1v6y6Y=) 7: nWpFu-ia2X0bjJCOwDt5OD3QhUU.roa (hash: j+w1oRLaR1UCeH6IJgbFlYRh4McsjrNOg64gWYp7KyE=) 8: p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl (hash: keCMXmp6vDHB88lIZb7HxHJtZQQufb1NbjbGcbxC40k=) 9: qK4AAnwuTwRwNOb2CLLZs8W9VuI.roa (hash: cqQ7l3QbvSMEr2phGWC5VDW+4MerE13RpRcZdGJsAvw=) 10: vIlI_dchwexZNflF7gIM73uLcOg.roa (hash: pny1c3FWYabHzSSLkClEvdiIBKMwq09M8u+AIiKsPlk=) 11: ydZkgwYcvYbM7mbYd53RAsEkq3U.roa (hash: qwmH6QR7NKSIBlvN+e3NJdnmXczvm/lNUAul9UFFgLI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 23 Oct 2025 13:42:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:0d:82:48:29:2e:2f:20:47:b3:5b:1e:ff:60:00:09:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7 Validity Not Before: Oct 22 20:00:33 2025 GMT Not After : Oct 23 20:00:33 2025 GMT Subject: CN=3456c67d3633d43a07f16432806eeb1112052764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ca:d6:ec:9a:e8:93:98:fd:f0:cb:01:bd:6f: 27:37:10:52:3f:fd:84:cc:81:64:47:6e:b3:43:cb: b8:8f:8e:08:5d:86:ec:a6:6b:43:41:34:6f:fd:bb: 78:eb:53:01:92:c3:de:44:7d:53:b2:29:98:a0:ed: 37:26:63:71:f3:ee:a8:9f:cf:c7:6b:0e:4e:f7:3e: 57:4f:31:a1:4b:d0:76:1f:6a:27:48:0e:15:fd:b1: ca:a8:3e:a0:3a:b7:f5:5c:33:b7:23:8f:cd:f9:3b: 8d:bd:fc:e2:2f:44:36:6b:ed:57:02:47:f5:ed:a0: 07:d9:99:92:85:5c:3f:06:f5:59:b2:66:50:ca:6d: a0:e1:b8:d8:93:5a:dc:3d:00:2f:a5:23:8f:b9:5e: fa:5d:67:a7:0e:c5:19:d7:88:a4:91:13:34:f6:e3: d2:f5:88:23:ab:70:ec:fa:d2:25:b2:27:bf:68:33: fd:41:54:57:19:e2:ec:40:d0:0a:9a:07:a1:24:17: b9:8e:9f:cf:1d:e2:0f:9c:21:02:c1:7d:7b:54:df: 52:8c:93:8b:f9:b9:35:0a:80:a9:03:40:b7:ec:bc: 36:48:93:03:e8:be:88:fa:6c:bc:38:c4:bb:d6:c8: 69:58:c3:e8:a2:f7:bf:db:39:4d:89:77:52:7d:94: 00:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:56:C6:7D:36:33:D4:3A:07:F1:64:32:80:6E:EB:11:12:05:27:64 X509v3 Authority Key Identifier: keyid:A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:19:dd:d1:16:a3:50:86:aa:1a:58:9f:8a:f2:c3:44:4e:61: f2:87:32:49:5f:61:31:15:e4:1c:20:dd:08:2d:e0:22:91:db: fb:13:4c:ba:25:32:a4:78:a6:43:3e:ae:d8:0e:2f:62:59:24: 30:39:15:d8:cd:ac:cd:c9:bd:d4:e3:57:e6:13:39:0a:57:d8: be:c1:ec:59:11:67:ef:ca:29:cf:ec:4b:65:b6:10:5c:d1:10: b2:ea:e4:7f:f9:0b:4d:87:ae:d8:d8:21:a5:d0:56:1c:a0:55: 59:21:c8:f1:4c:d3:b0:1e:13:72:99:ef:7e:27:ef:ac:9c:67: 8a:1a:cc:45:91:f8:f9:c1:3d:84:bd:93:a3:70:d8:7a:80:65: a3:07:63:fd:f8:9c:ad:bd:5c:7a:0b:3f:69:35:42:3a:06:da: bd:51:72:0a:5e:a3:c4:8c:02:56:37:e2:42:f8:6b:41:75:4f: 53:8c:37:ee:53:3a:26:9c:ee:a0:e6:ef:7a:5b:45:02:8c:fb: 14:fa:65:bd:36:3e:cd:9d:80:a7:2b:ec:d0:bf:23:ce:b1:a5: 16:4f:1d:81:bd:22:f7:16:2e:9a:c1:d5:2c:a9:eb:6a:f8:09: 7d:20:71:7d:c4:b3:b7:73:0b:9e:0b:25:ca:8c:f6:a2:68:2a: d0:a7:31:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoNgkgpLi8gR7NbHv9gAAn3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NmRkOWRhZDc1ODc3ZjdkMjhkMTRlMDhkYzU1YjEzMzBi ZDEzYjcwHhcNMjUxMDIyMjAwMDMzWhcNMjUxMDIzMjAwMDMzWjAzMTEwLwYDVQQD EygzNDU2YzY3ZDM2MzNkNDNhMDdmMTY0MzI4MDZlZWIxMTEyMDUyNzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosrW7Jrok5j98MsBvW8nNxBSP/2E zIFkR26zQ8u4j44IXYbspmtDQTRv/bt461MBksPeRH1TsimYoO03JmNx8+6on8/H aw5O9z5XTzGhS9B2H2onSA4V/bHKqD6gOrf1XDO3I4/N+TuNvfziL0Q2a+1XAkf1 7aAH2ZmShVw/BvVZsmZQym2g4bjYk1rcPQAvpSOPuV76XWenDsUZ14ikkRM09uPS 9Ygjq3Ds+tIlsie/aDP9QVRXGeLsQNAKmgehJBe5jp/PHeIPnCECwX17VN9SjJOL +bk1CoCpA0C37Lw2SJMD6L6I+my8OMS71shpWMPoove/2zlNiXdSfZQAywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDRWxn02M9Q6B/FkMoBu6xESBSdkMB8GA1UdIwQY MBaAFKdt2drXWHf30o0U4I3FWxMwvRO3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDIzWjJ0ZFlkX2ZTalJUZ2pjVmJFekM5RTdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9kMDA4ODktZTVjYS00MDkwLWE2YTQt MmFjNmZmNzViZWIwLzEvcDIzWjJ0ZFlkX2ZTalJUZ2pjVmJFekM5RTdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9kMDA4ODktZTVjYS00MDkwLWE2YTQtMmFjNmZmNzViZWIw LzEvcDIzWjJ0ZFlkX2ZTalJUZ2pjVmJFekM5RTdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJhnd0Raj UIaqGlifivLDRE5h8ocySV9hMRXkHCDdCC3gIpHb+xNMuiUypHimQz6u2A4vYlkk MDkV2M2szcm91ONX5hM5ClfYvsHsWRFn78opz+xLZbYQXNEQsurkf/kLTYeu2Ngh pdBWHKBVWSHI8UzTsB4TcpnvfifvrJxnihrMRZH4+cE9hL2To3DYeoBlowdj/fic rb1cegs/aTVCOgbavVFyCl6jxIwCVjfiQvhrQXVPU4w37lM6JpzuoObveltFAoz7 FPplvTY+zZ2Apyvs0L8jzrGlFk8dgb0i9xYumsHVLKnravgJfSBxfcSzt3MLngsl yoz2omgq0Kcx/A== -----END CERTIFICATE-----Generated at Wed Oct 22 22:33:14 2025 by rpki-client